MAL-2025-28063 Malicious code in obsidian-8d87p-e0waw-rose-project (npm)

The package obsidian-8d87p-e0waw-rose-project was found to contain malicious code...

Malicious code in hearth-95bye-rdp1t-rose-project (npm)

The package hearth-95bye-rdp1t-rose-project was found to contain malicious code...

Malicious code in vortex-wgri6-de8uj-rose-project (npm)

The package vortex-wgri6-de8uj-rose-project was found to contain malicious code...

MAL-2025-16277 Malicious code in buffalo-rose-jzs105-project (npm)

The package buffalo-rose-jzs105-project was found to contain malicious code...

MAL-2025-17953 Malicious code in dandelion-rose-xhe828-project (npm)

The package dandelion-rose-xhe828-project was found to contain malicious code...

MAL-2025-32295 Malicious code in river-rose-krq702-project (npm)

The package river-rose-krq702-project was found to contain malicious code...

MAL-2025-32460 Malicious code in rose_d6zyd_r6s3n_yosemite (npm)

The package rosed6zydr6s3nyosemite was found to contain malicious code...

MAL-2025-32456 Malicious code in rose-tetg8-xcllx-thunder-project (npm)

The package rose-tetg8-xcllx-thunder-project was found to contain malicious code...

MAL-2025-38068 Malicious code in valley-rose-emz716-project (npm)

The package valley-rose-emz716-project was found to contain malicious code...

MAL-2025-38606 Malicious code in vortex-wgri6-de8uj-rose-project (npm)

The package vortex-wgri6-de8uj-rose-project was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2022-2318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any...

DEBIAN-CVE-2025-38377

In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rosertdevicedown There are two bugs in rosertdevicedown that can cause use-after-free: 1. The loop bound t-count is modified within the loop, which can cause the loop to terminate early an...

UBUNTU-CVE-2025-38377

In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rosertdevicedown There are two bugs in rosertdevicedown that can cause use-after-free: 1. The loop bound t-count is modified within the loop, which can cause the loop to terminate early an...

CVE-2025-38377: Use After Free

In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rosertdevicedown There are two bugs in rosertdevicedown that can cause use-after-free: 1. The loop bound t-count is modified within the loop, which can cause the loop to terminate early an...

USN-7651-6 linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - S390 architecture; - Block layer subsystem; - Serial ATA and Parallel ATA drivers; - Driver...

USN-7651-5 linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - S390 architecture; - Block layer subsystem; - Serial ATA and Parallel ATA drivers; - Driver...

CVE-2022-50163 ax25: fix incorrect dev_tracker usage

In the Linux kernel, the following vulnerability has been resolved: ax25: fix incorrect devtracker usage While investigating a separate rose issue 1, and enabling CONFIGNETDEVREFCNTTRACKER=y, Bernard reported an orthogonal ax25 issue 2 An ax25dev can be used by one or many struct ax25cb. We thus...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net/rose: integer overflows can occur when using rosesetsockopt with potentially excessively large arguments, along with additional values being applied to them. To mitigate this issue, perform the following actions as a minimum...

Malicious code in rose-web3-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e7bba39177d14d11698b3ccaeca36599df068894146efc99d0ded173449d9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4631 Malicious code in rose-bsc-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0422833afa24ea6306580169f0075085ebb17b4758e03c3a49fa55b9420e3d2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...